Sr Principal Cybersecurity Embedded Software Engineer P5 (Onsite)

• Bachelor’s degree in Science, Technology, Engineering or Mathematics (STEM)
• 10 years of engineering experience, or an Advanced Degree or 7 years’ experience with an advanced degree.

At RTX, the world largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. 

Pratt & Whitney is a world leader in the design, manufacture and service of aircraft engines and auxiliary power systems and has been revolutionizing modern flight for over 100 years. Join us and help shape the future of aerospace and defense.

Control & Diagnostic Systems (CDS) is a dynamic engineering organization focused on the development and certification of military, commercial and industrial gas turbine engine control and diagnostic systems. CDS is responsible for all aspects of Pratt & Whitney engine control and diagnostic system development including requirements analysis & definition, system & software architecture, algorithm design and product software design, verification & validation. We integrate the control and diagnostic system design across other engine system modules and with the air vehicles and provide support throughout the complete engine product life cycle.

• →Lead cybersecurity engineering activities aligned with NIST RMF, including system categorization, security control selection, implementation, assessment, and continuous monitoring.
• →Develop, document, and maintain system security architecture, design artifacts, and cybersecurity engineering documentation.
• →Partner with software, systems, and program engineering teams to embed security requirements and controls into system and software designs.
• →Drive the development and execution of secure software development lifecycle (SSDLC) practices.
• →Support preparation of security assessment packages (e.g., SSP, SCTM, POA&M) and interface with internal/external assessors.
• →Perform threat modeling, vulnerability analysis, and risk assessments for new and existing systems.
• →Champion cybersecurity best practices and mentor junior engineers in secure design principles.
• →Contribute to technical reviews, design decisions, and risk mitigation strategies as a senior technical authority.
• →Ensure compliance with applicable DoD, NIST, and corporate cybersecurity standards.

• Advanced degree in computer engineering, software engineering, computer science or cybersecurity
• DoD, aerospace, or critical infrastructure cybersecurity experience.
• Experience with DevSecOps practices, automated security tooling, and CI/CD pipelines.
• Familiarity with embedded systems security.
• Demonstrated ability to influence across teams and lead complex technical initiatives.
• Leadership and strong communication skills

CDS develops complex, cyber-resilient control systems and software for commercial and military engines including power and thermal management Systems and auxiliary power units. CDS also develops advanced diagnostic & health management systems to monitor our products, forecast events and help facilitate MRO operations. With growing emphasis on sustainability, CDS is on the forefront of system development for hybrid and electric propulsion.

What is my role type?

In addition to transforming the future of flight, we are also transforming how and where we work. We’ve introduced role types to help you understand how you will operate in our blended work environment. This role is:

Click on this link to read the Policy and Terms